15 of 15 SIEM Jobs in the West Midlands

Description Job Title: SIEM Security Engineer Req ID: 62443 Job Function: Cyber Security Posting Start Date: 03/09/2026 Posting End Date: 01/10/2026 Division: Networks Job Location: GBR-Birmingham-Three Snowhill Advertised Salary: Competitive with Great Benefits Job Req ID: 62443 Posting Date … from various networking equipment, servers, firewalls and security appliances across multiple vendors. SIEM Solution Development Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. Continuously improving threat detection capabilities by tuning and optimising existing use cases and retiring use cases no longer providing value. Query ...

knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI-DSS and Cyber Kill Chain Fundamental understanding of PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies The ability to verify solutions and gain assurance that they are fit for purpose through demonstrable evidence of controls and testing ...

Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will run for a 6-month contract and be based ...

Systems, Networking XDR - Palo Alto Cortex Microsoft Security: Defender of Endpoint, Identity, Cloud Apps, Office 365 Azure AD Microsoft Purview Azure Sentinel SIEM/SOAR Endpoint security and XDR The contract opportunity for a Cyber Security Specialist will run for a 6-month contract and be based ...

and PCI-DSS. Experience with Cortex XDR, Illumio Core/CloudSecure and Microsoft Security. Knowledge of Defender, Azure AD, Purview and Sentinel. Experience with SIEM/SOAR, endpoint security and incident management. Good understanding of IT systems, networking and security best practice. Keywords: Cyber Security Engineer, Cyber Security Consultant, Cyber ...

security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider threats Excellent stakeholder management and communication skills Experience with SIEM and EDR technologies such as Microsoft Sentinel and Microsoft Defender Ability to work independently and make decisions in high-pressure situations Desirable Active SC Clearance ...

security incidents end-to-end Strong understanding of cyber threats including phishing, malware and insider threats Excellent stakeholder management and communication skills Experience with SIEM and EDR technologies such as Microsoft Sentinel and Microsoft Defender Ability to work independently and make decisions in high-pressure situations Desirable Active SC Clearance ...

positives and improve detection quality.Examining and correlating log data across endpoints, databases, applications, identity systems, networks, mobile platforms, and cloud environments.Working with SOAR platforms, SIEM technologies, MCP solutions, threat intelligence sources, endpoints, applications, network devices, and cloud environments.Mentoring junior analysts and supporting the development of the wider SOC team … cybersecurity, particularly within SOC, incident response, and information technology environments.Strong technical understanding of emerging cybersecurity threats, including adversary use of AI.Experience with SOAR, SIEM, threat intelligence platforms, identity systems, sandboxes, vulnerability management, and EDR/XDR tools.Broad understanding of endpoints, applications, network devices, databases, cloud environments, and security monitoring technologies.Strong ...

integrations Elasticsearch ingest pipelines, Data Streams, templates, mappings and ILM End-to-end data/feed onboarding, testing, troubleshooting and validation Elastic Security/SIEM environments High-volume ingestion architectures, including Kafka Elastic platform migrations, upgrades and optimisation We have opportunities available for both permanent consultants and Outside IR35 contractors ...

determine whether it represents a confirmed security incident. This includes performing detailed analysis to understand root cause, scope, impact, and attacker behaviour using SIEM platforms and supporting telemetry. You will coordinate and support incident response activities in line with defined SOC and customer processes, assisting with containment, eradication, and recovery … continual service improvement by identifying recurring issues and proposing corrective actions. What experience you'll bring: You will have hands‐on experience working with SIEM platforms such as Splunk, Microsoft Sentinel, or QRadar, and a strong understanding of incident response workflows and escalation management. You will be comfortable analysing security ...

authorization models, secrets management and secure SDLC practices. Ability to work with development teams to improve application security posture and shift security left. 3. SIEM Experience Hands-on experience with SIEM platforms for log onboarding, correlation rule creation, alert triage, dashboarding and use-case tuning. Ability to improve visibility, reduce … noise, and align SIEM content to relevant threats and business risks. 4. Organisation/General Security Broad understanding of enterprise security domains including policy, governance, risk, compliance, awareness, third-party risk and operational security. Experience translating business and regulatory requirements into practical security controls and improvement plans. 5. Identity & Access ...

traffic and security alerts to identify potential threats Supporting investigations into security incidents, gathering evidence and documenting findings Using Security Information and Event Management (SIEM) tools to detect and analyse suspicious activities Collaborating with the cyber security team to respond to incidents and implement mitigation strategies Helping maintain and update ...

traffic and security alerts to identify potential threats Supporting investigations into security incidents, gathering evidence and documenting findings Using Security Information and Event Management (SIEM) tools to detect and analyse suspicious activities Collaborating with the cyber security team to respond to incidents and implement mitigation strategies Helping maintain and update ...

across areas including: Investigating and responding to medium and high-severity security incidents Performing detailed analysis of alerts, logs and suspicious activity Working with SIEM, EDR and wider security tooling Escalating and coordinating containment and remediation activity Acting as a technical escalation point for Tier 1 analysts Identifying indicators … experience within a SOC or security operations environment, with solid hands-on exposure to areas such as: Security monitoring and alert triage Incident response SIEM platforms EDR technologies Threat analysis/threat intelligence Vulnerability management Detection engineering or SIEM tuning I'm particularly interested in speaking with analysts ...

Group is seeking a SIEM Security Engineer in Birmingham to design, develop and maintain our strategic SIEM ingestion and monitoring. You will work on data ingestion pipelines, threat detection use cases and performance tuning within a security engineering team. Role requires strong SIEM experience, familiarity with Elastic Stack, and collaboration ...